singularity

This is a patch release in the 4.3 series.

Bug Fixes

• Don't attempt to set relatime on workdir / scratch mounts in OCI-Mode.

Thanks / Reporting Bugs

Thanks to our contributors for code, feedback and, testing efforts!

As always, please report any bugs to: https://github.com/sylabs/singularity/issues/new

If you think that you've discovered a security vulnerability please...

This is a patch release in the 4.3 series, with security fixes.

Security Related Fixes

• Updates bundled CNI plugins to v1.9.0, to fix CVE-2025-67499 Portmap nftables backend can intercept non-local traffic.
• Dependencies updated.

Thanks / Reporting Bugs

Thanks to our contributors for cod...

This is a patch release in the 4.3 series, with security fixes.

Security Related Fixes

• Fix for CVE-2025-64750 / GHSA-wwrx-w7c9-rf87 Ineffective application of selinux / apparmor LSM process labels via the --security flag.
• Dependencies updated.

Thanks / Reporting Bugs

Thanks to our contributor...

This is a patch release in the 4.3 series,

Security Related Fixes

• GitHub release packages built using Go 1.25.3, due to large number of denial-of-service CVEs fixed in 1.25.2.
• All dependencies updated.

Thanks / Reporting Bugs

Thanks to our contributors for code, feedback and, testing efforts!

As always, please...

This is a patch release in the 4.3 series, with dependency updates and the following changes:

Requirements / Packaging

• Requires Go 1.24.3 or above, due to various dependencies.
• Bundled squashfuse is now 0.6.1.

Changed defaults / behaviours

• Use OCI Manifest Schema 1 for ORAS pushes. Addresses errors pushing to Quay, which applies a must be restriction for the `config.m...